$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: shJievSRFAicjcijo4AICa+/ndKZniwY5CUoWEj2vdY= Subject key identifier: 7C:2E:53:0D:87:1E:01:5D:A3:3B:E4:21:00:01:86:25:38:01:28:FE Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 1E8797D9EE60B10ABB2172BFAC3C7B3D920F0308 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 0455 Signing time: Fri 09 May 2025 08:11:58 +0000 Manifest this update: Fri 09 May 2025 08:06:58 +0000 Manifest next update: Mon 12 May 2025 10:10:58 +0000 Files and hashes: 1: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: vlEIDjt83wwQk3HwAWBPLNd6sEY73ZGUCpTw4WIJuF0=) 2: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: NnBFli84jNMIBDBMNq+D25uIynDWqxxKW2NwfNdru0M=) 3: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: z/eXMs9mS1DfyQh4Im/qLS47C/jyUxWG9CNZqbqlq2w=) 4: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: gsd+S7j+gYENBbS9EyZfuvkGD3/9iVqdRz0LDMNsbm4=) 5: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: VYk0jX+OGoB4/7D73QnDw8fy7xRRmNePMPCehWSGzIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 10:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:87:97:d9:ee:60:b1:0a:bb:21:72:bf:ac:3c:7b:3d:92:0f:03:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: May 9 08:06:58 2025 GMT Not After : May 12 10:10:58 2025 GMT Subject: CN=7C2E530D871E015DA33BE42100018625380128FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:73:d8:91:e5:50:17:4f:a1:3f:ca:1e:9b:df: 39:a9:00:a6:b9:fa:64:d8:86:43:1a:49:b8:8c:f1: f3:92:de:b6:90:b5:90:f3:e2:fb:88:84:c6:d4:43: 56:41:15:ed:96:a6:83:8b:7c:18:bc:a3:11:7c:b6: 87:2c:c9:24:e5:c7:bb:9e:ad:da:19:e1:84:a0:55: c7:79:10:67:ad:9b:39:8d:5c:37:53:05:77:1a:c9: 2b:c9:c0:f1:14:2f:36:d5:54:8b:96:52:7b:55:66: e3:18:df:f8:a4:a9:c6:21:ac:7d:07:72:26:dd:1a: a1:69:66:f3:f6:26:3f:71:01:16:ec:5d:d2:10:ac: 64:2b:3b:8c:e0:20:40:c8:ee:84:d8:a8:38:8b:fb: 37:f6:76:c3:7a:f3:54:4e:cc:48:22:7b:3d:66:7d: b1:b2:94:5a:8a:93:21:a1:54:d2:26:00:16:f7:f1: b9:39:bf:49:db:96:13:21:77:e6:d0:3d:f2:4c:e7: e9:74:7e:31:67:22:14:36:be:9c:1b:04:de:29:56: 34:23:e1:1c:81:53:de:59:f5:64:a4:72:69:d9:f5: e7:b2:f4:d8:5b:36:73:c2:ab:91:a4:33:85:5d:29: 2a:dc:ea:4b:b3:06:18:75:12:b4:b9:72:50:a9:7f: 49:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2E:53:0D:87:1E:01:5D:A3:3B:E4:21:00:01:86:25:38:01:28:FE X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:5b:72:46:6f:7b:19:a6:dc:43:c2:32:01:52:6d:0c:ce:1b: 08:f3:f5:92:94:5b:3f:60:fa:a9:ea:c0:02:81:f8:cc:f4:c4: 7f:48:1d:0f:35:11:03:fe:2a:32:db:29:0b:ad:ef:35:e8:49: 36:87:f9:53:e8:36:1b:4c:4c:1d:9e:4e:43:9b:ae:95:aa:63: 21:dd:fa:7e:2a:e7:96:7a:81:c8:e0:67:42:0b:7c:b4:57:22: 8b:1f:05:f7:71:4f:11:e9:d4:93:57:2a:02:16:4e:5e:9c:77: 2a:34:da:07:02:e7:53:6e:96:4d:c4:61:30:5e:61:9c:ce:8a: 4a:9c:ff:e8:30:4e:6e:03:16:22:3d:cf:d6:2d:ca:c5:0a:e6: 8d:3b:37:99:58:ff:36:4f:76:b5:e3:47:6c:9a:69:0b:45:e0: 9d:68:c1:d8:3a:aa:31:99:cb:fe:15:43:44:27:3f:d0:5e:0d: 7f:70:36:4e:6e:fb:a3:9a:57:09:f3:d9:c4:2d:ba:e0:51:18: 7f:6d:10:4c:d8:3b:47:0f:fd:b6:f4:8e:eb:ac:bb:f9:24:b7: b9:af:2d:8d:15:43:c9:c1:46:62:bd:81:1d:08:cc:52:a5:b4: 99:a5:63:19:45:14:eb:a1:a9:33:0f:b9:c3:9b:b6:d1:de:d9: 74:0c:08:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHoeX2e5gsQq7IXK/rDx7PZIPAwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNTA1MDkwODA2NThaFw0yNTA1MTIxMDEwNThaMDMxMTAvBgNV BAMTKDdDMkU1MzBEODcxRTAxNURBMzNCRTQyMTAwMDE4NjI1MzgwMTI4RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjc9iR5VAXT6E/yh6b3zmpAKa5 +mTYhkMaSbiM8fOS3raQtZDz4vuIhMbUQ1ZBFe2WpoOLfBi8oxF8tocsySTlx7ue rdoZ4YSgVcd5EGetmzmNXDdTBXcaySvJwPEULzbVVIuWUntVZuMY3/ikqcYhrH0H cibdGqFpZvP2Jj9xARbsXdIQrGQrO4zgIEDI7oTYqDiL+zf2dsN681ROzEgiez1m fbGylFqKkyGhVNImABb38bk5v0nblhMhd+bQPfJM5+l0fjFnIhQ2vpwbBN4pVjQj 4RyBU95Z9WSkcmnZ9eey9NhbNnPCq5GkM4VdKSrc6kuzBhh1ErS5clCpf0kZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfC5TDYceAV2jO+QhAAGGJTgBKP4wHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdbckZvexmm3EPCMgFSbQzOGwjz9ZKUWz9g +qnqwAKB+Mz0xH9IHQ81EQP+KjLbKQut7zXoSTaH+VPoNhtMTB2eTkObrpWqYyHd +n4q55Z6gcjgZ0ILfLRXIosfBfdxTxHp1JNXKgIWTl6cdyo02gcC51Nulk3EYTBe YZzOikqc/+gwTm4DFiI9z9YtysUK5o07N5lY/zZPdrXjR2yaaQtF4J1owdg6qjGZ y/4VQ0QnP9BeDX9wNk5u+6OaVwnz2cQtuuBRGH9tEEzYO0cP/bb0juusu/kkt7mv LY0VQ8nBRmK9gR0IzFKltJmlYxlFFOuhqTMPucObttHe2XQMCLk= -----END CERTIFICATE-----Generated at Sat May 10 04:58:16 2025 by rpki-client